Private unpublished draft. Shared operator name: TOMOSHIBI LLC. Verify the effective date and final distribution's processing before publication.
Data and storage
Guluna handles URLs/shared text, saved article text/translations/quotes/images, PDF originals/units/extracted text/metadata, analysis, notes and review progress in iCloud Drive or local files. No separate Guluna account is present in the current main flow. The policy is not to store article or note data on the provider's server. The approved Free scope is sharing/on-device analysis/saved-article viewing/basic PDF import; Pro covers iCloud sync/automatic Mac analysis and result receipt/review. After expiry, locally stored articles/results stay viewable and exportable, with new sync/paid features stopped and no automatic deletion. Cloud-only materialization, root selection/migration and export need design and implementation.
AI and connections
Today Foundation Models analyzes the article displayed after the user opens it, with an unsaved preview until confirmation. Quotes and notes have separate save actions. Sync arrival alone does not run AI. Processing while the Mac app is running is an agreed new direction, not implemented with consent, collection and persistence implications.
Browsing and image hosts receive connections; iCloud is an Apple service. WebKit cookies and credentials are designed to stay outside article files and AI input. PDF URLs use a limited direct public HTTP(S) route without cookies, credentials or cache. Apple translation/model preparation may involve connections. The app is not described as having no network activity.
Analytics and contact
Telemetry, Firebase, Sentry and Feedback are currently disabled by configuration; the main app target depends on GulunaCore, Onboarding and Settings. Their introduction is an owner-approved direction, not completed integration. Optional separate consent, initially off, basic use without consent and stopping future transmission on withdrawal are design proposals. Verify redaction of article/PDF text, URLs, notes, profiles and secrets. Deleting previously received data is separate from stopping transmission. Guluna-specific dependencies, retention, region, privacy manifests and App Privacy remain unverified; other products' values are not transferred.
The intended channels are the shared tmsb.app Web form and user-entered Feedback. Retain inquiries as necessary for handling and remove unnecessary personal data, with no invented fixed duration. Endpoints, receiving and downstream storage/deletion procedures are unconnected or unverified.
Deletion and restoration
The confirmed policy is trash, restoration and explicit user-selected permanent erasure, without automatic expiry. Current items are excluded through deleted state, while analysis backups remain. Originals/units/translations/clips/notes/review, all roots and sync resurrection prevention need implementation and acceptance. WebKit data has a separate deletion UI. Immediate removal of every OS or user backup is not guaranteed.
Publication conditions
Verify the effective date, working contact, final SDK/transmitted fields/retention/deletion/region and App Privacy against the final artifact. Disabled settings or a shared draft do not establish a network audit or legal compliance.
